ExploitShield

ExploitShield Anti-Grief & Exploit/Crash Protection!

ExploitShield [FREE] – Advanced Exploit & Crash Protection
Protect your Minecraft server from duplication glitches, crash exploits, and malicious packets — fully automatic.

Requires ProtocolLib 5.4.0+, Java 17+, and PacketEvents 2.13.0+.

ExploitShield has reached a mature and stable stage of development. The current feature set is considered complete, and ongoing updates will focus on security improvements, performance optimizations, compatibility with new Minecraft versions, and critical bug fixes. As new duplication methods, crash exploits, or security vulnerabilities are discovered, ExploitShield will continue to receive updates to provide protection against them.

ExploitShield is a high-performance anti-exploit plugin designed to stop common and advanced exploits.

This plugin is built as a high-end anti-duplication engine, not a basic fix.
ExploitShield is designed to mitigate a wide range of known duplication exploits through behavioral analysis, packet validation, rate limiting, and server-side consistency checks.
While no anti-exploit solution can guarantee complete protection against every emerging exploit, ExploitShield focuses on reducing exploitability while maintaining gameplay stability and low false positives.

Key Features
Duplication Protection

• Offline Dupe
  
  
• Dupe Chain Tracking
  
  
• Item Signature Tracking
  
  
• Creative Inventory Dupe
  
  
• General Inventory Dupe
  
  
• Minecart Dupe
  
  
• Chunk Burst Detection
  
  
• Piston Extend / Retract
  
  
• Piston Rate Limiting
  
  
• Piston Chain Abuse Detection
  
  
• Sticky Piston + TNT Dupe
  
  
• Slime Block Dupe
  
  
• Hopper + Container Dupe
  
  
• Automatic Exploit Neutralization (Eviscerate)
  
  
• Async Logging + Cleanup
  
  
• Item salvage exploits
  
  
• Chunk Teleport Duplication
  
  
• Boat & ArmorStand Duplication
  
  
• Block Update Duplication
  
  
• Container / Furnace / Brewing Stand Duplication
  
  
• Vehicle Duplication (Boat / Minecart)
  
  
• Llama Duplication
  
  
• Donkey Duplication
  
  
• Horse Duplication
  
  
• Mule Duplication

• Multi-Player Simultaneous Duplication Detection

Crash & Packet Protection

• Malformed packet filtering
  
  
• Sign & book crash prevention
  
  
• Oversized / invalid item & NBT data protection
  
  
• Creative inventory abuse detection
  
  
• Advanced Chat, Rename & Payload Validation
  
  
• Tab Exception

Movement & Glitch Fixes

• Ender Pearl glitch prevention
  
  
• Nether roof & glide exploit fixes
  
  
• Suspicious movement tracking (configurable)

Anti-Grief & Server Protection

• Block Placement Pace limiter
  
  
• Lava placement per chunk limiter
  
  
• Entity Spam limits (per chunk & per player/sec)

Client Integrity & Exploit Prevention

• Ghost item detection
  
  
• No-swing attack prevention
  
  
• Multi-hit attack prevention

Discord Webhook Alerts

• Real-time exploit notifications
  
  
• Color-coded severity levels
  
  
• Fully configurable events
  
  
• Monitor your server even while offline

Performance Focused

• Async-Safe Packet Architecture & Performance Optimized
  Core systems are designed with asynchronous-safe processing and optimized packet pipelines, reducing main-thread pressure and ensuring stable TPS even under high player load and packet-heavy environments.

Punishment System

• Ban IP / Ban
  
  
• Kick
  
  
• Cancel
  
  
• Configurable thresholds & VL system

Administrative Tools

• /exploitshield → Show command list
  
  
• /exploitshield reload → Reload configuration
  
  
• /exploitshield status → Display plugin status
  
  
• /exploitshield fixlist → Show detected exploit fixes
  
  
• /exploitshield debug → Debug mode
  
  
• /exploitshield gui → Open GUI panel
  
  
• /exploitshield profile <player> → View player exploit profile
  
  
• Player Join Info → Sends player name, client brand & version to exploitshield.joininfo holders

⚙️ Configuration

• Granular enable/disable options
  
  
• Clean and readable config.yml
  
  
• Configurable Safe defaults (plug & play)

(Config preview available below ⬇️)

✅ Behavioral & Packet Analysis (Hamster Engine)

• Real-time behavioral monitoring for suspicious player actions
  
  
• Detects bot-like consistency & unnatural action frequency
  
  
• Tracks Violation Levels (VL) with automatic decay for normal behavior
  
  
• Alerts server staff on threshold violations (configurable)

✅ Netty Packet Flood Protection

• Custom Netty handler injected per player to prevent packet flooding
  
  
• Detects and blocks burst packets & abnormal rates
  
  
• Automatic connection closure on extreme violations
  
  
• Safe cleanup on player quit to prevent memory leaks

✅ Packet-Level Monitoring via PacketEvents

• Monitors critical client packets: USE_ENTITY, CLICK_WINDOW, FLYING
  
  
• Behavioral analysis without directly cancelling packets
  
  
• Cancels packets only when critical thresholds are exceeded

✅ Safe Netty Utilities

• Retrieves player channels reliably across server versions
  
  
• Pipeline manipulation without crashes or version conflicts

Advanced Packet Inspection & Strict Validation

• Advanced packet validation system
  
  
• Chat message overflow protection
  
  
• Illegal character detection
  
  
• Book exploit prevention (page count, page size, total size)
  
  
• Creative inventory exploit checks
  
  
• ClickWindow carried-item validation
  
  
• Display-name & lore overflow protection
  
  
• PersistentDataContainer abuse detection
  
  
• Invalid item amount detection
  
  
• Malformed packet handling & automatic cancellation
  
  
• Violation tracking & adaptive punishment system

✅ Adaptive Packet Rate Limiting

• PacketRateLimiter upgraded with SmartCounter for dynamic limits
• Limits now scale based on player ping to reduce false positives
• New packet types monitored: FLYING, LOOK, BLOCK_PLACE, BLOCK_DIG
• Burst detection added for short spikes
• Automatic cleanup for stale counters to prevent memory leaks

✅ Anti-NBT / Item Security

• UTF-8 overflow detection
  
  
• PDC abuse detection
  
  
• enchants / attributes / flags protection
  
  
• lore / name / book validation
  
  
• serialized metadata analysis

✅ TabComplete Protection

• Tab spam cooldown system
  
  
• TabComplete crash protection (oversized packets)
  
  
• Control character filtering
  
  
• Unicode spam detection
  
  
• Malformed TabComplete structure validation
  
  
• Packet-level TabComplete inspection via PacketEvents

✅ BadPackets Protection (PacketEvents)

• BadPackets A -> N

✅ Payload Protection

• Payload size limits
  
  
• Empty payload validation
  
  
• Plugin channel validation
  
  
• Plugin channel format validation
  
  
• Invalid channel character detection
  
  
• Strict UTF-8 validation for REGISTER / UNREGISTER packets
  
  
• REGISTER / UNREGISTER packet validation
  
  
• REGISTER channel total length validation
  
  
• Brand payload protection
  
  
• BungeeCord payload protection

✅ Invalid Position Protection

• Blocks invalid player coordinates
• Detects and blocks NaN values
• Detects and blocks Infinite values
• Prevents extreme coordinate overflow crashes

✅ Invalid Rotation Protection

• Detects invalid yaw/pitch values
• Blocks NaN and Infinite rotations
  
  
• Prevents abnormal rotation values from reaching the server

✅ Fake Creative Protection

• Detects illegal Creative Inventory packets
• Automatically kicks players attempting to send Creative packets while not in Creative mode

✅ Pick Item Validation

• Validates PICK_ITEM slot values
• Blocks invalid slot packets
• Automatically removes malicious clients sending illegal slot IDs

✅ View Distance Validation

• Validates CLIENT_SETTINGS view distance values
• Prevents invalid view distance packets

Important Notes
Our goal is to block exploits and suspicious packets in order to prevent server crashes and malicious abuse.
Because of this, in some cases legitimate players may experience minor inconvenience due to the strict protection system.
Critical packets are now inspected before Bukkit-level processing, preventing malformed or malicious data from reaching internal server handlers.
In the latest version, ExploitShield introduces enhanced protection mechanisms for newly discovered exploits and duplication methods. By leveraging ProtocolLib and PacketEvents, the plugin now actively monitors and neutralizes suspicious actions at the packet level, ensuring robust defense against emerging threats without affecting normal gameplay.

Previously, certain NBT payloads were processed internally by the server before plugins could intercept them, making some crashes and exploits unavoidable. In this update, ExploitShield can intercept and analyze NBT data at the source, before it is processed by the server, thanks to ProtocolLib and PacketEvents integration. This ensures maximum protection against malicious items, payloads, and NBT-based crashes.

Tested under real-world multiplayer environments with packet-heavy activity, automation systems, and exploit simulation scenarios.

Why ExploitShield?
✔ Free
✔ Research-driven protection architecture
✔ Packet-level exploit mitigation
✔ Stability-focused design philosophy
✔ Continuous security improvements
✔ Real exploit research
✔ Actively maintained
✔ Designed with professional anti-cheat architecture principles
✔ Concurrent use of ProtocolLib and PacketEvents
✔ ExploitShield is designed to mitigate a wide range of known duplication exploits using behavioral analysis, packet validation, rate limiting, and server-side consistency checks.
✔ Designed for survival redstone-heavy servers
✔ No interference with legitimate farms
✔ Tested with 30+ redstone machines

Extensive Testing & Stability
ExploitShield has been extensively tested across Minecraft versions 1.17 through 1.21, including real-world scenarios involving malicious clients, exploit tools, and attack simulations.

All tests were conducted in Strict mode using ProtocolLib and PacketEvents API, ensuring that the plugin handles packet-level exploits and advanced abuse cases reliably.

During these tests, the plugin demonstrated high detection accuracy and stability, successfully blocking abusive behavior without causing false positives for legitimate players.

All protections are designed with strict validation, rate-based analysis, and safe thresholds, ensuring strong security while preserving normal gameplay.

Tested Against Modern Cheat Clients
ExploitShield has been stress-tested in real-world multiplayer environments against some of the most widely used modified Minecraft clients.

During controlled testing scenarios, the plugin successfully prevented crash attempts, exploit packets, and malicious payload behaviors without server instability or critical false positives.

✔ Meteor Client
✔ Xynis Client
✔ FDP Client
✔ BetterCraft
✔ SmogProf Client

No successful crash, packet-based exploit, or instability was observed under Strict Mode configurations.

⚠ Note: Results may vary depending on server configuration, enabled modules, and strictness settings.

https://www.youtube.com/watch?v=4sPViKDsYtc

Works on Folia, Spigot, and Paper servers. ✅

️ Anti-Exploit Protection Preview

INSTALLATION
1. Download and install ProtocolLib
2. Download and install PacketEvents
3. Place ExploitShield.jar into your plugins folder
4. Restart your server
5. Your server is now protected and ready to go.

bStats (Anonymous Usage Statistics)

ExploitShield uses bStats to collect anonymous usage statistics. This helps measure plugin adoption and prioritize future improvements.

The collected information may include:

• Minecraft server version
• Java version
• Operating system
• Plugin version
• Number of online players
• Number of servers using the plugin

ExploitShield does NOT collect or transmit:

• Server IP address
• Player usernames
• Player chat or personal data
• World data or server files
• Configuration contents
• Any sensitive information

All statistics are anonymous and are processed by the bStats platform. If you prefer not to participate, bStats can be disabled in its configuration file.

bStats page:
https://bstats.org/plugin/bukkit/EZExploitFixer/28681

PERMISSIONS/COMMANDS